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DETAILED ACTION 



1. 



Claims 1-15 and 18-33 are pending. 



2. 



This is a Non-Final rejection. 



Continued Examination Under 37 CFR 1.114 



3. A request for continued examination under 37 CFR 1.114, including the 
fee set forth in 37 CFR 1 .17(e), was filed in this application after final rejection. 
Since this application is eligible for continued examination under 37 CFR 1 .1 14, 
and the fee set forth in 37 CFR 1 .17(e) has been timely paid, the finality of the 
previous Office action has been withdrawn pursuant to 37 CFR 1.114. 
Applicant's submission filed on August 4, 2006 has been entered. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 



(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 



4. Claims 1, 4-7, 12-15, 19-21, 24-25, and 27-33 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Wright, et al. (US 6,084,969), and 



further in view of Jakobsson (US 6,587,946). 
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As per claim 1: 

Wright discloses a public, non-commutative method for encoding an 
original message to be passed to a recipient by way of a grantor, the method 
comprising the steps of: 

obtaining an encrypted message representative of the original message, 
the encrypted message having been encrypted with a public key corresponding 
to the grantor according to a public key encryption scheme; [col.7, lines 4-5 and 
64-65 and col. 10, lines 4-8] 

generating a public proxy key based on a private key corresponding to the 
recipient and on the private key corresponding to said grantor, wherein said 
grantor's private key and said recipient's private key are combined, and the 
combination of the private keys is based on said public key encryption scheme 
and provides that it is computationally difficult to recover the recipient's private 
key from the public proxy key even with the knowledge of the grantor's private 
key; and [col.5, lines 2-4] 

applying the public proxy key to the encrypted message to transform the 
encrypted message into a transformed message [col. 13, lines 2-9], wherein the 
transformed message is decryptable by the recipient using information selected 
from the private key corresponding to the recipient and the available public key 
information [col. 14, lines 1-9 and 34-35], and wherein the encrypted message 
remains in an encrypted [col. 12, lines 55-56] state while being transformed into 
the transformed message and is not decrypted to the original message and re- 
encrypted at any point during the transformation. 
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Wright discloses alternative methods for secure message transmission. 
There is a method that decrypts and then re-encrypts the message and there is 
the alternative method of a straight through process of the encryption and the re- 
encryption process throughout the transformation of the encrypted document 
where the encryption remains encrypted [col. 13, lines 49-65 and col. 14, lines 
16-30]. It is obvious that a message being encrypted is considered a message 
that has been transformed. However, Wright did not explain the encrypted 
message transforms to the encrypted message into a transformed message that 
is not decrypted to the original message and re-encrypted. 

Jakobsson teaches proxy cryptography and demonstrates that asymmetric 
proxy transformations exist (col.3, lines 18-21). Jakobsson discloses the 
asymmetric encryption where the transformation is performed under quorum 
control which guarantees that if there is not a dishonest quorum, then the 
plaintext message whose encryption is being transformed is not revealed to the 
proxy servers. Jakobsson's solution is efficient allowing tight control over actions 
and forwarding secret key encrypted messages from a primary recipient to a 
secondary recipient without disclosing the underlying encrypted message (col.3, 
lines 50-63). Jakobsson discloses the proxy transforming encrypted messages 
to encryptions with a variety of different recipient public keys to allow for 
categorization of the encryptions (col.4, lines 17-20). Further, Jakobsson 
includes the proxy to transform an encryption which the proxy could not decrypt 
into an encryption for which the proxy holds the secret key (col. 6, lines 10-14). It 
would have been obvious for a person of ordinary skills in the art at the time of 
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the invention was made to combine the teaching of Wright with transforming the 
encrypted message to a transformed message that is not decrypted and re- 
encrypted as taught by Jakobsson because during transformation the plaintext is 
not revealed which leads to not being decrypted and transforming an encrypted 
message is efficient and does not disclose the underlying encrypted message 
(col.3, lines 50-63) 

As per claim 4: See Wright on col. 14, lines 17-20; discusses the receiving, 
generating, and applying steps are performed by the grantor. 
As per claim 5: See Wright on col. 12, lines 55-59; discussing the providing 
the transformed message to the recipient. 

As per claim 6: See Wright on coL12, lines 4-7; discusses decrypting the 
transformed message using information selected from the private key 
corresponding to the recipient and any available public information. 
As per claim 7: See Wright on col. 12, lines 4-7; discusses decrypting the 
transformed message using information using the private key corresponding to 
the recipient. 

As per claim 12: See Wright on col.11, lines 47-56; discussing the encrypted 
message comprises a first portion and a second portion, the first portion 
encoding the original message, a generator, and a random key, and the second 
portion encoding the public key corresponding to the grantor and the random 
key. 

As per claim 13: See Wright on col. 14, lines 17-20; discussing the applying 
step operates on the second portion of the encrypted message. 
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As per claim 14: See Wright on col.8, lines 37-55; discussing the original 
message is passed to a recipient through at least one additional intermediate 
grantor by repeating the generating and applying steps for each additional 
intermediate grantor. 
As per claim 15: 

Wright disclose a public, non-commutative method for encrypting an 
original message to be passed .a recipient by way of a grantor, the method 
comprising the steps of: 

obtaining an encrypted message representative of the original message, 
the encrypted message having been encrypted with a public key corresponding 
to the grantor according to a public key encryption scheme; [col.7, lines 4-5 and 
64-65 and col. 10, lines 4-8] 

generating a public proxy key based on a public key corresponding to the 
recipient and on the private key corresponding to the public key of said grantor, 
wherein said grantor's private key and said recipient's public key are combined, 
and the combination of said grantor's the private key and said recipient's public 
key is based on said public key encryption scheme; and [col.5, lines 2-5 and 
col.7, lines 64-67] 

applying the public proxy key to the encrypted message to transform the 
encrypted message, into a transformed message [col. 13, lines 2-9], wherein the 
transformed message is decryptable by the recipient using information selected 
from the private key corresponding to the recipient's public key [col. 14, lines 1-9 
and 34-35] and available public key information [col. 12, lines 55-56] and 
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wherein the encrypted message remains in an encrypted [col. 12, lines 55-56] 
state while being transformed ino the transformed message and is not decrypted 
to the original message and re-encrypted at any point during the transformation. 

Wright discloses alternative methods for secure message transmission. 
There is a method that decrypts and then re-encrypts the message and there is 
the alternative method of a straight through process of the encryption and the re- 
encryption process throughout the transformation of the encrypted document 
where the encryption remains encrypted [col. 13, lines 49-65 and col. 14, lines 
16-30], It is obvious that a message being encrypted is considered a message 
that has been transformed. However, Wright did not explain the encrypted 
message transforms to the encrypted message into a transformed message that 
is not decrypted to the original message and re-encrypted. 

Jakobsson teaches proxy cryptography and demonstrates that asymmetric 
proxy transformations exist (col.3, lines 18-21). Jakobsson discloses the 
asymmetric encryption where the transformation is performed under quorum 
control which guarantees that if there is not a dishonest quorum, then the. 
plaintext message whose encryption is being transformed is not revealed to the 
proxy servers. Jakobsson's solution is efficient allowing tight control over actions 
and forwarding secret key encrypted messages from a primary recipient to a 
secondary recipient without disclosing the underlying encrypted message (col.3, 
lines 50-63). Jakobsson discloses the proxy transforming encrypted messages 
to encryptions with a variety of different recipient public keys to allow for 
categorization of the encryptions (col.4, lines 17-20). Further, Jakobsson 
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includes the proxy to transform an encryption which the proxy could not decrypt 
into an encryption for which the proxy holds the secret key (col. 6, lines 10-14). It 
would have been obvious for a person of ordinary skills in the art at the time of 
the invention was made to combine the teaching of Wright with transforming the 
encrypted message to a transformed message that is not decrypted and re- 
encrypted as taught by Jakobsson because during transformation the plaintext is 
not revealed which leads to not being decrypted and transforming an encrypted 
message is efficient and does not disclose the underlying encrypted message 
(col.3, lines 50-63) 

As per claim 19: See Wright on col. 12, lines 4-7; discussing the message is 
decryptable by the recipient using information selected from the private key 
corresponding to the recipient. 

As per claim 20: See Wright on col. 8, lines 37-55; discussing the original 
message is passed to a recipient through at least one additional intermediate 
grantor by repeating the transforming step for each additional intermediate 
grantor. 

As per claim 21: See Wright on col.3, lines 28-33; discussing it is 
computationally difficult to recover the grantor's private key from the public proxy 
key. 

As per claim 24: See Wright on col. 14, lines 17-20; discussing the receiving, 
generating, and applying steps are performed by the grantor. 
As per claim 25: See Wright on col.5, lines 46-48; discussing obtaining said 
recipient's private key by said grantor. 
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As per claim 27: See Wright on col. 3, lines 28-33; discussing it is 
computationally difficult to recover the grantor's private key from the public proxy 
key. 

As per claim 28: See Wright on col- 10, lines 4-8; discussing public encryption 
scheme is a discrete-logarithm-based encryption scheme, wherein said 
combination of said private keys comprises using the modular difference of both 
private keys as an exponent in a modular exponentiation. 
As per claim 29: See Wright on col.5, lines 46-48; discussing obtaining the 
recipient's private key by the grantor. 

As per claim 30: See Wright on col. 12, lines 62-65; discusses implementing 
the method with one or more hardware or software devices configured to perform 
the method. 

As per claim 31: See Wright on col.6, lines 37-46 and col. 12, lines 62-65; 

discusses implementing the method with one or more computer-readable 
instructions embedded on a computer-readable medium and configured to cause 
one or more computer processors to perform the method. 
As per claim 32: See Wright on col. 12, lines 62-65; discusses implementing 
the method with one or more hardware or software devices configured to perform 
the method. 

As per claim 33: See Wright on col.6, lines 37-46 and col. 12, lines 62-65; 

discusses implementing the method with one or more computer-readable 
instructions embedded on a computer-readable medium and configured to cause 
one or more computer processors to perform the method. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

5. Claims 2-3, 8-11, and 22-23 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over the Wright and Jakobsson combination, and 
further in view of Mittra (US 5,748,736). 

As per claims 2 and 3: 

Wright discloses a public- private encryption method wherein uses private 
keys and public keys for encryption and decryption (col. 7, lines 59-65). 
Jakobsson teaches proxy cryptography and demonstrates that asymmetric proxy 
transformations exist (col.3, lines 18-21). However, the Wright and Jakobsson 
combination fails to include an EIGamal encryption scheme. 

Mittra teaches digitally signing the messages where the procedures of 
digitally signing the messages utilizing the EIGamal scheme. Mittra discloses the 
ELGamal scheme is well known in the art for supporting source authentication 
and sender non-repudiation (col. 10, line 62 thru col.1 1 , line 3). 

Therefore, it would have been obvious for a person of ordinary skill in the 
art to modify the Wright and Jakobsson combination to include the EIGamal 
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encryption scheme of because digitally signing the messages supports 
authentication and sender non-repudiation. 

As per claim 8: See Wright on col. 7, lines 3-5 and col.11! lines 10-11 and 
47-56; discusses the encrypted message comprises a first portion and a second 
portion, the first portion encoding a generator and a random key, and the second 
* portion encoding the original message, the public key corresponding to the 
grantor, and the random key. 

As per claim 9: See Wright on col. 14, lines 17-20; discussing the applying 

step operates on the second portion of the encrypted message. 

As per claim 10: See Wright on col. 11, lines 47-56; discusses the encrypted 

message comprises a first portion and a second portion, the first portion 

encoding the original message, a generator, and a random key, and the second 

portion encoding the public key corresponding to the grantor and the random 

key. 

As per claim 11: See Wright on col. 14, lines 17-20; discussing the applying 
step operates on the second portion of the encrypted message. 
As per claims 22 and 23: 

Wright discloses a public- private encryption method wherein uses private 
keys and public keys for encryption and decryption (col. 7, lines 59-65). 
Jakobsson teaches proxy cryptography and demonstrates that asymmetric proxy 
transformations exist (col.3, lines 18-21). However, the Wright and Jakobsson 
combination fails to include an EIGamal encryption scheme. 
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Mittra teaches digitally signing the messages where the procedures of 
digitally signing the messages utilizing the EIGamal scheme. Mittra discloses the 
ELGamal scheme is well known in the art for supporting source authentication 
and sender non-repudiation (col. 10, line 62 thru col-11, line 3). 

Therefore, it would have been obvious for a person of ordinary skill in the 
art to modify the Wright and Jakobsson combination to include the EIGamal " 
encryption scheme of because digitally signing the messages supports 
authentication and sender non-repudiation. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 



6. Claims 18 and 26 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over the Wright and Jakobsson combination, and in further 
view of Irish Times "Encryption Technology to Thwart Computer Hackers 



System Should Protect Security of E-Commerce" (City Edition). 



Application/ Control Number: 09/468,703 Page 13 

Art Unit: 2135 

As per claim 18: 

Wright discloses a public- private encryption method wherein uses private 
keys and public keys for encryption and decryption (col .7, lines 59-65). 
Jakobsson teaches proxy cryptography and demonstrates that asymmetric proxy 
transformations exist (col.3, lines 18-21). However, the Wright and Jakobsson 
combination does not include the Cramer-Shoup encryption scheme. 

The Irish Times disclosed in its article "Encryption Technology to Thwart 
Computer Hackers System Should Protect Security of E-Commerce" a Cramer- 
Shoup encryption scheme [paragraph 4] where this encryption was developed 
by mathematicians from IBM and Swiss Federal Institute of Technology to have 
created an unbreakable protection for computer data [paragraph 2]. Cramer- 
Shoup method thwarts attacks of decoding encrypted messages passing through 
the network with bogus messages by adding another series of calculations which 
ensure the server leaks no information when responding to the bogus text 
[paragraph 6]. 

Therefore, it would have been obvious for a person of ordinary skills in the 
art at the time of the invention to combine the teachings of the Wright and 
Jakobsson combination with Cramer-Shoup encryption scheme as taught by The 
Irish Times because this method thwarts attacks of decoding encrypted 
messages passing through the network with bogus messages by adding another 
series of calculations which ensure the server leaks no information when 
responding to the bogus text. 
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As per claim 26: 

Wright discloses a public- private encryption method wherein uses private 
keys and public keys for encryption and decryption (col .7, lines 59-65). 
Jakobsson teaches proxy cryptography and demonstrates that asymmetric proxy 
transformations exist (col.3, lines 18-21). However, the Wright and Jakobsson 
combination does not include the Cramer-Shoup encryption scheme. 

The Irish Times disclosed in its article "Encryption Technology to Thwart 
Computer Hackers System Should Protect Security of E-Commerce" a Cramer- 
Shoup encryption scheme [paragraph 4] where this encryption was developed 
by mathematicians from IBM and Swiss Federal Institute of Technology to have 
created an unbreakable protection for computer data [paragraph 2]. Cramer- 
Shoup method thwarts attacks of decoding encrypted messages passing through 
the network with bogus messages by adding another series of calculations which 
ensure the server leaks no information when responding to the bogus text 
[paragraph 6]. 

Therefore, it would have been obvious for a person of ordinary skills in the 
art at the time of the invention to combine the teachings of the Wright and 
Jakobsson combination with Cramer-Shoup encryption scheme as taught by The 
Irish Times because this method thwarts attacks of decoding encrypted 
messages passing through the network with bogus messages by adding another 
series of calculations which ensure the server leaks no information when 
responding to the bogus text. 
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Conclusion 



Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to LEYNNA T. HA 
whose telephone number is (571) 272-3851. The examiner can normally 
be reached on Monday - Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Kim Vu can be reached on (571) 272-3859. 
The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status 
information for published applications may be obtained from either 
Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more 
information about the PAIR system, see http://pair-direct.uspto.gov. 
Should you have questions on access to the Private PAIR system, contact 
the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 (IN USA 
OR CANADA) or 571-272-1000. , 



LHa 
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